Tests are included, dependencies are limited, and the repository is current rather than archived. The missing license and lack of a security policy make reuse and vulnerability reporting less clear.
58%
Total Score
50
100
83
75
No declared license, license file, or repository license file was detected, leaving the legal terms for reuse unclear.
Tests are present in both the package and repository, which supports basic project maturity. The package has no README, reducing consumer guidance for this bot package.
The repository is owned by an individual user rather than an organization, so the single-contributor concentration has no visible organizational handoff support.
One contributor made 100% of the repository's commits over the last three months, creating a concentrated maintenance risk with no organizational backing shown.
Only one commit was recorded in the last three months, indicating limited recent development despite the package's frequent registry releases.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
ramsey/uuid Version ^4.7 | — | — |
losthost/telle Version ^4.4 | — | — |
losthost/bot-view Version ^2.4 | — | — |
losthost/time-tracker Version ^v1 | — | — |
losthost/proxy-message Version dev-master | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.